Skip to content

ManagedKubernetesClusterProps

Properties for defining a ManagedKubernetesCluster.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-cs-managedkubernetescluster

Initializer 

import "github.com/alibabacloud-go/ros-cdk/alicloudroscdkcs"
&alicloudroscdkcs.ManagedKubernetesClusterProps {
    Name: interface{},
    VpcId: interface{},
    Addons: interface{},
    CloudMonitorFlags: interface{},
    ClusterSpec: interface{},
    ContainerCidr: interface{},
    ControlPlaneLogComponents: interface{},
    ControlPlaneLogProject: interface{},
    ControlPlaneLogTtl: interface{},
    DeleteOptions: interface{},
    DeletionProtection: interface{},
    EncryptionProviderKey: interface{},
    EndpointPublicAccess: interface{},
    FormatDisk: interface{},
    IsEnterpriseSecurityGroup: interface{},
    KeepInstanceName: interface{},
    KeyPair: interface{},
    KubernetesVersion: interface{},
    LoadBalancerSpec: interface{},
    LoginPassword: interface{},
    NodeCidrMask: interface{},
    NodeNameMode: interface{},
    NodePools: interface{},
    OsType: interface{},
    Platform: interface{},
    PodVswitchIds: interface{},
    ProxyMode: interface{},
    ResourceGroupId: interface{},
    Runtime: interface{},
    SecurityGroupId: interface{},
    SecurityHardeningOs: interface{},
    ServiceCidr: interface{},
    SnatEntry: interface{},
    SocEnabled: interface{},
    Tags: *[]github.com/alibabacloud-go/ros-cdk/alicloudroscdkcs.RosManagedKubernetesCluster.TagsProperty,
    Taint: interface{},
    TimeoutMins: interface{},
    UserData: interface{},
    ZoneIds: interface{},
}

Properties

Name Type Description
Name interface{} Property name: The name of the cluster.
VpcId interface{} Property vpcId: VPC ID.
Addons interface{} Property addons: A combination of addon plugins for Kubernetes clusters.
CloudMonitorFlags interface{} Property cloudMonitorFlags: Whether to install the cloud monitoring plugin: true: indicates installation false: Do not install Default to false.
ClusterSpec interface{} Property clusterSpec: The managed cluster spec.
ContainerCidr interface{} Property containerCidr: The container network segment cannot conflict with the VPC network segment.
ControlPlaneLogComponents interface{} Property controlPlaneLogComponents: List of target components for which logs need to be collected.
ControlPlaneLogProject interface{} Property controlPlaneLogProject: Control plane log project.
ControlPlaneLogTtl interface{} Property controlPlaneLogTtl: Control plane log retention duration (unit: day).
DeleteOptions interface{} Property deleteOptions: Delete options, only work for deleting resource.
DeletionProtection interface{} Property deletionProtection: Specifies whether to enable deletion protection for the cluster.
EncryptionProviderKey interface{} Property encryptionProviderKey: The ID of the key that is managed by Key Management Service (KMS).
EndpointPublicAccess interface{} Property endpointPublicAccess: Whether to enable the public network API Server: true: which means that the public network API Server is open.
FormatDisk interface{} Property formatDisk: Specifies whether to mount a data disk to nodes that are created on existing Elastic Compute Service (ECS) instances.
IsEnterpriseSecurityGroup interface{} Property isEnterpriseSecurityGroup: Specifies whether to create an advanced security group.
KeepInstanceName interface{} Property keepInstanceName: Specifies whether to retain the names of existing ECS instances that are used in the cluster.
KeyPair interface{} Property keyPair: Key pair name.
KubernetesVersion interface{} Property kubernetesVersion: The version of the Kubernetes cluster.
LoadBalancerSpec interface{} Property loadBalancerSpec: The specification of the Server Load Balancer instance.
LoginPassword interface{} Property loginPassword: SSH login password.
NodeCidrMask interface{} Property nodeCidrMask: The maximum number of IP addresses that can be assigned to nodes.
NodeNameMode interface{} Property nodeNameMode: A custom node name consists of a prefix, an IP substring, and a suffix.
NodePools interface{} Property nodePools: The configurations of Node pools.
OsType interface{} Property osType: The type of operating system.
Platform interface{} Property platform: The release version of the operating system.
PodVswitchIds interface{} Property podVswitchIds: The list of pod vSwitches.
ProxyMode interface{} Property proxyMode: kube-proxy proxy mode, supports both iptables and ipvs modes.
ResourceGroupId interface{} Property resourceGroupId: The ID of resource group.
Runtime interface{} Property runtime: The container runtime of the cluster.
SecurityGroupId interface{} Property securityGroupId: Specifies the ID of the security group to which the cluster ECS instance belongs.
SecurityHardeningOs interface{} Property securityHardeningOs: Alibaba Cloud OS security hardening.
ServiceCidr interface{} Property serviceCidr: The service network segment cannot conflict with the VPC network segment and the container network segment.
SnatEntry interface{} Property snatEntry: Whether to configure SNAT for the network.
SocEnabled interface{} Property socEnabled: Valid values: true: enables reinforcement based on classified protection.
Tags *[]TagsProperty Property tags: Tag the cluster.
Taint interface{} Property taint: It is used to mark nodes with taints.
TimeoutMins interface{} Property timeoutMins: Cluster resource stack creation timeout, in minutes.
UserData interface{} Property userData: The user-defined data.
ZoneIds interface{} Property zoneIds: Zone ids of worker node virtual switches belongs to.

NameRequired 

Name interface{}
  • Type: interface{}

Property name: The name of the cluster.

The cluster name can use uppercase and lowercase letters, Chinese characters, numbers, and dashes.

VpcIdRequired 

VpcId interface{}
  • Type: interface{}

Property vpcId: VPC ID.

AddonsOptional 

Addons interface{}
  • Type: interface{}

Property addons: A combination of addon plugins for Kubernetes clusters.

Network plug-in: including Flannel and Terway network plug-ins Log service: Optional. If the log service is not enabled, the cluster audit function cannot be used. Ingress: The installation of the Ingress component is enabled by default.

CloudMonitorFlagsOptional 

CloudMonitorFlags interface{}
  • Type: interface{}

Property cloudMonitorFlags: Whether to install the cloud monitoring plugin: true: indicates installation false: Do not install Default to false.

ClusterSpecOptional 

ClusterSpec interface{}
  • Type: interface{}

Property clusterSpec: The managed cluster spec.

Value: ack.pro.small: Professional hosting cluster, namely: "ACK Pro version cluster". ack.standard: Standard hosting cluster. Default value: ack.standard. The value can be empty. When it is empty, a standard managed cluster will be created.

ContainerCidrOptional 

ContainerCidr interface{}
  • Type: interface{}

Property containerCidr: The container network segment cannot conflict with the VPC network segment.

When the system is selected to automatically create a VPC, the network segment 172.16.0.0/16 is used by default.

ControlPlaneLogComponentsOptional 

ControlPlaneLogComponents interface{}
  • Type: interface{}

Property controlPlaneLogComponents: List of target components for which logs need to be collected.

Supports apiserver, kcm, scheduler, ccm and controlplane-events.

ControlPlaneLogProjectOptional 

ControlPlaneLogProject interface{}
  • Type: interface{}

Property controlPlaneLogProject: Control plane log project.

If this field is not set, a log service project named k8s-log-{ClusterID} will be automatically created.

ControlPlaneLogTtlOptional 

ControlPlaneLogTtl interface{}
  • Type: interface{}

Property controlPlaneLogTtl: Control plane log retention duration (unit: day).

Default 30.

DeleteOptionsOptional 

DeleteOptions interface{}
  • Type: interface{}

Property deleteOptions: Delete options, only work for deleting resource.

DeletionProtectionOptional 

DeletionProtection interface{}
  • Type: interface{}

Property deletionProtection: Specifies whether to enable deletion protection for the cluster.

After deletion protection is enabled, the cluster cannot be deleted in the ACK console or by calling API operations. Valid values:true: enables deletion protection for the cluster. false: disables deletion protection for the cluster. Default value: false.

EncryptionProviderKeyOptional 

EncryptionProviderKey interface{}
  • Type: interface{}

Property encryptionProviderKey: The ID of the key that is managed by Key Management Service (KMS).

This key is used to encrypt data disks.You can use KMS in only professional managed Kubernetes clusters.

EndpointPublicAccessOptional 

EndpointPublicAccess interface{}
  • Type: interface{}

Property endpointPublicAccess: Whether to enable the public network API Server: true: which means that the public network API Server is open.

false: If set to false, the API server on the public network will not be created, only the API server on the private network will be created.Default to false.

FormatDiskOptional 

FormatDisk interface{}
  • Type: interface{}

Property formatDisk: Specifies whether to mount a data disk to nodes that are created on existing Elastic Compute Service (ECS) instances.

Valid values: true: stores the data of containers and images on a data disk. The original data on the disk will be overwritten. Back up data before you mount the disk. false: does not store the data of containers and images on a data disk. Default value: false. How to mount a data disk: If the ECS instances have data disks mounted and the file system of the last data disk is not initialized, the system automatically formats the data disk to ext4. Then, the system mounts the data disk to /var/lib/docker and /var/lib/kubelet. The system does not create or mount a new data disk if no data disk has been mounted to the ECS instances.

IsEnterpriseSecurityGroupOptional 

IsEnterpriseSecurityGroup interface{}
  • Type: interface{}

Property isEnterpriseSecurityGroup: Specifies whether to create an advanced security group.

This parameter takes effect only if security_group_id is left empty. Note You must specify an advanced security group for a cluster that has Terway installed. true: creates an advanced security group. false: does not create an advanced security group. Default value: false.

KeepInstanceNameOptional 

KeepInstanceName interface{}
  • Type: interface{}

Property keepInstanceName: Specifies whether to retain the names of existing ECS instances that are used in the cluster.

true: retains the names. false: does not retain the names. The new names are assigned by the system. Default value: true.

KeyPairOptional 

KeyPair interface{}
  • Type: interface{}

Property keyPair: Key pair name.

Specify one of KeyPair or LoginPassword.

KubernetesVersionOptional 

KubernetesVersion interface{}
  • Type: interface{}

Property kubernetesVersion: The version of the Kubernetes cluster.

LoadBalancerSpecOptional 

LoadBalancerSpec interface{}
  • Type: interface{}

Property loadBalancerSpec: The specification of the Server Load Balancer instance.

Allowed value: slb.s1.small|slb.s2.small|slb.s2.medium|slb.s3.small|slb.s3.medium|slb.s3.large

LoginPasswordOptional 

LoginPassword interface{}
  • Type: interface{}

Property loginPassword: SSH login password.

Password rules are 8-30 characters and contain three items (upper and lower case letters, numbers, and special symbols). Specify one of KeyPair or LoginPassword.

NodeCidrMaskOptional 

NodeCidrMask interface{}
  • Type: interface{}

Property nodeCidrMask: The maximum number of IP addresses that can be assigned to nodes.

This number is determined by the specified pod CIDR block. This parameter takes effect only if the cluster uses the Flannel plug-in.Default value: 25.

NodeNameModeOptional 

NodeNameMode interface{}
  • Type: interface{}

Property nodeNameMode: A custom node name consists of a prefix, an IP substring, and a suffix.

The format iscustomized,{prefix},{ip_substring},{suffix}, for example: customized,aliyun.com,5,test.

  • The prefix and suffix can contain one or more parts that are separated by periods (.). Each part can contain lowercase letters, digits, and hyphens (-). The node name must start and end with a lowercase letter or digit.
  • The IP substring length specifies the number of digits to be truncated from the end of the node IP address. Valid values: 5 to 12. For example, if the node IP address is 192.168.0.55, the prefix is aliyun.com, the IP substring length is 5, and the suffix is test, the node name will be aliyun.com00055test.

NodePoolsOptional 

NodePools interface{}
  • Type: interface{}

Property nodePools: The configurations of Node pools.

OsTypeOptional 

OsType interface{}
  • Type: interface{}

Property osType: The type of operating system.

Valid values: Windows Linux Default value: Linux.

PlatformOptional 

Platform interface{}
  • Type: interface{}

Property platform: The release version of the operating system.

Valid values: CentOS AliyunLinux QbootAliyunLinux Qboot Windows WindowsCore Default value: CentOS.

PodVswitchIdsOptional 

PodVswitchIds interface{}
  • Type: interface{}

Property podVswitchIds: The list of pod vSwitches.

For each vSwitch that is allocated to nodes, you must specify at least one pod vSwitch in the same zone. The pod vSwitches cannot be the same as the node vSwitches. We recommend that you set the mask length of the CIDR block to a value no greater than 19 for the pod vSwitches. The pod_vswitch_ids parameter is required when the Terway network plug-in is selected for the cluster.

ProxyModeOptional 

ProxyMode interface{}
  • Type: interface{}

Property proxyMode: kube-proxy proxy mode, supports both iptables and ipvs modes.

The default is iptables.

ResourceGroupIdOptional 

ResourceGroupId interface{}
  • Type: interface{}

Property resourceGroupId: The ID of resource group.

RuntimeOptional 

Runtime interface{}
  • Type: interface{}

Property runtime: The container runtime of the cluster.

The default runtime is Docker.

SecurityGroupIdOptional 

SecurityGroupId interface{}
  • Type: interface{}

Property securityGroupId: Specifies the ID of the security group to which the cluster ECS instance belongs.

SecurityHardeningOsOptional 

SecurityHardeningOs interface{}
  • Type: interface{}

Property securityHardeningOs: Alibaba Cloud OS security hardening.

Value: true: enables security hardening OS. false: disables security hardening OS. Default value: false.

ServiceCidrOptional 

ServiceCidr interface{}
  • Type: interface{}

Property serviceCidr: The service network segment cannot conflict with the VPC network segment and the container network segment.

When the system is selected to automatically create a VPC, the network segment 172.19.0.0/20 is used by default.

SnatEntryOptional 

SnatEntry interface{}
  • Type: interface{}

Property snatEntry: Whether to configure SNAT for the network.

When a VPC can access the public network environment, set it to false. When an existing VPC cannot access the public network environment: When set to True, SNAT is configured and the public network environment can be accessed at this time. If set to false, it means that SNAT is not configured and the public network environment cannot be accessed at this time. Default to true.

SocEnabledOptional 

SocEnabled interface{}
  • Type: interface{}

Property socEnabled: Valid values: true: enables reinforcement based on classified protection.

false: disables reinforcement based on classified protection. Default value: false.

TagsOptional 

Tags *[]TagsProperty

Property tags: Tag the cluster.

TaintOptional 

Taint interface{}
  • Type: interface{}

Property taint: It is used to mark nodes with taints.

It is usually used for the scheduling strategy of Pods. The corresponding concept is: tolerance. If there is a corresponding tolerance mark on the Pods, the stain on the node can be tolerated and scheduled to the node.

TimeoutMinsOptional 

TimeoutMins interface{}
  • Type: interface{}

Property timeoutMins: Cluster resource stack creation timeout, in minutes.

The default value is 60.

UserDataOptional 

UserData interface{}
  • Type: interface{}

Property userData: The user-defined data.

[1, 16KB] characters.User data should not be base64 encoded. If you want to pass base64 encoded string to the property, use function Fn::Base64Decode to decode the base64 string first.

ZoneIdsOptional 

ZoneIds interface{}
  • Type: interface{}

Property zoneIds: Zone ids of worker node virtual switches belongs to.